Home
SQL programmingYou can use the HCL OneDB™ implementation of the SQL language to develop applications for HCL OneDB™ database servers.
Guide to SQL: SyntaxThe HCL OneDB™ Guide to SQL: Syntax describes the syntax of the statements, data types, expressions, operators, and built-in functions of the HCL OneDB™ dialect of the SQL language.
SQL statementsThis chapter describes the syntax and semantics of SQL statements that are recognized by HCL OneDB™.
REVOKE statementUse the REVOKE statement to cancel access privileges or roles that are held by users, by roles, or by PUBLIC, or to cancel user security labels or exemptions from the rules of security policies.
Security Administration Options

Security Administration Options

In conjunction with the GRANT statement, the REVOKE statement supports the discretionary access control (DAC) data security feature of HCL OneDB™ by specifying which users or roles hold privileges that are required to access the database or objects within the database.

The Security Administration Options of the REVOKE statement, like their counterparts for the GRANT statement, support an additional set of data security features, called label-based access control (LBAC). These features enable HCL OneDB to allow or withhold access to protected data on the basis of a comparing a row security label or column security label that is contained in the data object to the user security label and other credentials that have been granted to the user who is seeking access.

Notes:

Use of these REVOKE statement security administration options is restricted:

Only the Database Server Administrator (DBSA), by default user informix, can use the REVOKE DBSECADM statement to revoke the DBSECADM role.
Only a user who holds the DBSECADM role can issue the REVOKE EXEMPTION, REVOKE SECURITY LABEL, or REVOKE SETSESSIONAUTH statements.